portfolio-rebalance-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow queries portfolio management platforms (Orion Connect, Addepar, Envestnet/Tamarac), storage systems, and optional external integrations like meeting intelligence tools, which can ingest outsider-submitted data or free text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill's documented financial operation is preparing portfolio rebalance reviews and drafting rebalance plans for advisors; explicitly, it notes under direct scope exclusions that it "never places an order" (SKILL.md:244). The skill generates indirect analytical outputs, reports, and draft plans for downstream execution by an advisor, placing its financial exposure as indirect.